libnftables: call nft_cmd_expand() only with CMD_ADD (Phil Sutter) [2073287]
src: add CMD_OBJ_SETELEMS (Phil Sutter) [2073287]
src: rename CMD_OBJ_SETELEM to CMD_OBJ_ELEMENTS (Phil Sutter) [2073287]
rule: fix element cache update in __do_add_setelems() (Phil Sutter) [2073287]
rule: memleak in __do_add_setelems() (Phil Sutter) [2073287]
tests: shell: auto-removal of chain hook on netns removal (Phil Sutter) [2070924]
mnl: do not use expr->identifier to fetch device name (Phil Sutter) [2070924]

mnl: do not build nftnl_set element list (Phil Sutter) [2047821]
tests: py: add dnat to port without defining destination address (Phil Sutter) [2030773]
evaluate: fix inet nat with no layer 3 info (Phil Sutter) [2030773]
evaluate: attempt to set_eval flag if dynamic updates requested (Phil Sutter) [2039594]
src: support for restoring element counters (Phil Sutter) [2039594]
netlink: remove unused parameter from netlink_gen_stmt_stateful() (Phil Sutter) [2039594]

tests: shell: better parameters for the interval stack overflow test (Phil Sutter) [1908127]
tests: shell: $NFT needs to be invoked unquoted (Phil Sutter) [1908127]

tests: cover baecd1cf2685 ("segtree: Fix segfault when restoring a huge interval set") (Phil Sutter) [1908127]
segtree: Fix segfault when restoring a huge interval set (Phil Sutter) [1908127]

json: Drop pointless assignment in exthdr_expr_json() (Phil Sutter) [1999059]
parser_json: Fix for memleak in tcp option error path (Phil Sutter) [1999059]
parser_bison: Fix for implicit declaration of isalnum (Phil Sutter) [1999059]
parser_json: Fix error reporting for invalid syntax (Phil Sutter) [1994141]

tests: shell: Fix bogus testsuite failure with 100Hz (Phil Sutter) [1919203]
doc: nft.8: Extend monitor description by trace (Phil Sutter) [1820365]
include: missing sctp_chunk.h in Makefile.am (Phil Sutter) [1979334]
exthdr: Implement SCTP Chunk matching (Phil Sutter) [1979334]
scanner: sctp: Move to own scope (Phil Sutter) [1979334]
scanner: introduce start condition stack (Phil Sutter) [1979334]
json: Simplify non-tcpopt exthdr printing a bit (Phil Sutter) [1979334]
json: tcp: add raw tcp option match support (Phil Sutter) [1979334]
tcp: add raw tcp option match support (Phil Sutter) [1979334]
tcpopt: allow to check for presence of any tcp option (Phil Sutter) [1979334]
tcpopt: split tcpopt_hdr_fields into per-option enum (Phil Sutter) [1979334]
tcpopt: rename noop to nop (Phil Sutter) [1979334]
tcpopts: clean up parser -> tcpopt.c plumbing (Phil Sutter) [1979334]
parser: merge sack-perm/sack-permitted and maxseg/mss (Phil Sutter) [1979334]
tests/py: Move tcpopt.t to any/ directory (Phil Sutter) [1979334]

src: Optimize prefix matches on byte-boundaries (Phil Sutter) [1934926]
src: Support odd-sized payload matches (Phil Sutter) [1934926]
spec: Add an rpminspect.yaml file to steer rpminspect (Phil Sutter) [1962184]
spec: Explicitly state dist string in Release tag (Phil Sutter) [1962184]

evaluate: Reject quoted strings containing only wildcard (Phil Sutter) [1818117]
tests: monitor: use correct $nft value in EXIT trap (Phil Sutter) [1919203]
monitor: Fix for use after free when printing map elements (Phil Sutter) [1919203]
tests: Disable tests known to fail on RHEL8 (Phil Sutter) [1919203]

json: init parser state for every new buffer/file (Phil Sutter) [1930873]

json: don't leave dangling pointers on hlist (Phil Sutter) [1900565]
json: Fix seqnum_to_json() functionality (Phil Sutter) [1900565]
json: echo: Speedup seqnum_to_json() (Phil Sutter) [1900565]
proto: Fix ARP header field ordering (Phil Sutter) [1896334]
proto: add sctp crc32 checksum fixup (Phil Sutter) [1895804]
mergesort: unbreak listing with binops (Phil Sutter) [1891790]
evaluate: missing datatype definition in implicit_set_declaration() (Phil Sutter) [1877022]
evaluate: Perform set evaluation on implicitly declared (anonymous) sets (Phil Sutter) [1877022]
src: store expr, not dtype to track data in sets (Phil Sutter) [1877022]

src: Set NFT_SET_CONCAT flag for sets with concatenated ranges (Phil Sutter) [1820684]
include: Resync nf_tables.h cache copy (Phil Sutter) [1820684]

segtree: Fix get element command with prefixes (Phil Sutter) [1832235]
tests: 0034get_element_0: do not discard stderr (Phil Sutter) [1832235]
segtree: Merge get_set_interval_find() and get_set_interval_end() (Phil Sutter) [1832235]
segtree: Fix missing expires value in prefixes (Phil Sutter) [1832235]

JSON: Improve performance of json_events_cb() (Phil Sutter) [1835300]
doc: Document notrack statement (Phil Sutter) [1841292]

parser_json: Support ranges in concat expressions (Phil Sutter) [1805798]

Restore default config to be empty (Phil Sutter) [1694723]

Package requires libnftnl-1.1.5-3 (Phil Sutter) [1795224]
src: Add support for concatenated set ranges (Phil Sutter) [1795224]
src: Add support for NFTNL_SET_DESC_CONCAT (Phil Sutter) [1795224]
include: resync nf_tables.h cache copy (Phil Sutter) [1795224]
parser: add a helper for concat expression handling (Phil Sutter) [1795224]